AUPARSE_GET_TIMESTAMP
Section: Linux Audit API (3)
Updated: Sept 2007
Index Return to Main Contents
NAME
auparse_get_timestamp - access timestamp of the eventSYNOPSIS
#include <auparse.h>const au_event_t *auparse_get_timestamp(auparse_state_t *au);
DESCRIPTION
auparse_get_timestamp provides an accessor function for the event's timestamp data structure. The data structure is as follows:
typedef struct
{
time_t sec; // Event seconds
unsigned int milli; // millisecond of the timestamp
unsigned long serial; // Serial number of the event
const char *host; // Machine's node name
} au_event_t;
RETURN VALUE
Returns NULL if an error occurs; otherwise, a valid pointer to the data.
SEE ALSO
auparse_get_time(3), auparse_get_milli(3), auparse_get_serial(3), auparse_get_node(3), auparse_timestamp_compare(3).
AUTHOR
Steve Grubb
Index
- NAME
- SYNOPSIS
- DESCRIPTION
- RETURN VALUE
- SEE ALSO
- AUTHOR